Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/132b785f4079e6cce37bff1e7ad1c3bd393d6ae9.cer
File:                     132b785f4079e6cce37bff1e7ad1c3bd393d6ae9.cer (raw, json)
Hash identifier:          C2g9/Xg30TFR+jbuH8e1IVsZD7pS1lvKQ1soWZ1Av74=
Subject key identifier:   1A:AD:CF:46:B0:7A:A2:B4:F8:D8:4A:87:80:D0:0E:0F:32:30:92:BE
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F851AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/132b785f4079e6cce37bff1e7ad1c3bd393d6ae9.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 28 Jul 2023 18:10:48 +0000
Certificate not after:    Tue 27 May 2025 15:16:35 +0000
Subordinate resources:    AS: 273047
                          IP: 2801:165::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16273838 (0xf851ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 28 18:10:48 2023 GMT
            Not After : May 27 15:16:35 2025 GMT
        Subject: CN=132b785f4079e6cce37bff1e7ad1c3bd393d6ae9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:21:4e:30:c5:ee:6f:df:77:4e:7d:21:a4:c8:
                    1c:db:13:e8:fc:90:ba:cf:26:d8:ac:2a:a2:1f:34:
                    78:b6:c1:8e:3f:d9:2b:e5:d7:97:82:4c:ed:cb:ad:
                    c7:4b:98:58:fb:17:b4:fd:3b:d5:71:c8:ce:ca:c2:
                    bd:20:1b:e8:7c:1e:ba:38:c9:1a:c7:fb:f3:6d:8e:
                    f0:a1:b5:79:d7:9f:6d:97:d3:3f:f0:66:4e:40:61:
                    0a:a3:6d:e3:9f:d2:9c:2e:80:4c:d0:3e:06:0a:ad:
                    c5:8b:b9:6d:56:51:65:cc:f8:9c:24:6c:3c:51:dc:
                    6f:fe:f4:ee:94:2a:b3:dd:8f:7d:59:4f:75:8b:95:
                    aa:f7:ec:a9:97:ca:91:76:7b:fd:72:4c:c8:a2:d1:
                    e7:1d:75:f1:7d:d0:a2:e3:4f:f3:98:d7:87:c7:23:
                    35:77:ad:85:c6:e3:68:06:bb:ae:7e:cd:99:1f:5c:
                    6e:d7:47:73:9e:00:e9:48:03:0e:32:c8:60:7d:0c:
                    2f:f3:93:42:14:ad:4d:b6:dc:83:5a:f5:48:24:16:
                    55:3d:fb:c9:8b:bb:11:9e:89:91:ef:a2:d4:60:f9:
                    60:be:df:64:13:19:14:46:04:fc:9c:bb:2a:77:45:
                    6f:8a:67:96:b0:6a:b4:03:78:d3:e4:e0:88:5d:67:
                    c0:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:AD:CF:46:B0:7A:A2:B4:F8:D8:4A:87:80:D0:0E:0F:32:30:92:BE
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/132b785f4079e6cce37bff1e7ad1c3bd393d6ae9.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:165::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273047

    Signature Algorithm: sha256WithRSAEncryption
         20:30:d0:fe:b0:b7:47:08:5f:66:a7:0c:c2:ee:ea:ab:83:d2:
         9a:d7:9b:20:41:f1:ba:76:3f:f4:ff:33:d7:73:7c:75:c6:60:
         18:74:0f:ef:ca:da:fc:bd:91:bd:43:51:e6:b8:39:77:c3:5c:
         c0:16:98:c8:20:49:dc:43:75:b8:60:b0:95:c3:14:16:21:66:
         45:b5:8b:fa:21:28:86:00:4a:91:00:3a:64:b4:33:d0:75:51:
         01:f2:ba:27:86:a0:6e:8a:6f:ca:63:d9:9a:6c:88:df:c3:54:
         93:be:ed:58:9f:2d:5b:74:56:29:f9:39:cf:0a:ba:30:5a:7f:
         89:ce:e1:ad:73:07:4c:b3:ef:6f:7f:f6:da:b9:cb:f9:66:df:
         ef:5f:2d:0b:b4:5d:d9:b1:5a:6f:49:94:77:51:f0:28:c3:ad:
         ac:d7:d1:7c:cf:35:24:17:ca:00:97:7a:cb:94:99:88:21:a6:
         8b:5d:06:93:37:4d:38:6b:bc:1e:fe:25:77:17:01:87:f6:18:
         e2:00:4d:58:57:00:8d:4e:13:23:f7:ba:42:1e:e4:d0:72:31:
         21:0c:00:de:5b:93:97:1d:aa:01:ca:45:26:25:8d:58:c5:ac:
         9b:54:a6:a8:63:11:59:a2:56:86:ef:27:b0:f5:f0:83:81:eb:
         ff:47:c2:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----